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BEN KANE 

Abstract. Assuming GRH. wc present an algorithm which inputs a prime p and 
outputs the set of fundamental discriminants D < Q such that the reduction map 
modulo a prime above p from elliptic curves with CM hy Od to supersingular elliptic 
curves in characteristic p. In the algorithm we first determine an explicit constant Dp 
so that \D\ > Dp implies that the map is necessarily surjective and then we compute 
explicitly the cases \D\ < Dp. 

Supposant vraie la conjecture de Riemann generalisee nous presentons un algorithme 
qui, donnc un nombre premier p, calcule I'ensemble des discriminants fondamentaux 
D < tels que I'application de reduction modulo un premier aux dessus p des courbes 
elliptiques avec multiplication complexe par Od vers les courbes elliptiques supersin- 
gular en characteristique p est surjective. Dans I'algorithme, nous d'abord determinons 
une borne Dp explicite, tel que |-D| > Dp implique que I'application est necessairement 
surjective et puis nous calculous explicitement les cas \D\ < Dp. 



1. Introduction 

For D < a fundamental discriminant, consider the imaginary quadratic field K : = 
Q(V^) with ring of integers Od and Hilbert class field Hk- From the work of Deuring 
[5], given a prime p which does not split in Od (i.e. (D/p) ^ 1) and an elliptic curve 
E/Hk with CM by Od (i-e. End;^(£') = Od) the reduction to characteristic p gives a 
supersingular elliptic curve defined over Fp2. Using an equidistribution result of Duke 
and Schulze-Pillot [5], based upon bounds for coefficients of half-integral weight cusp 
forms by Iwaniec [13] and Duke [3], combined with an (ineffective) lower bound for the 
class number h{D) of Od due to Siegel [23], Elkies, Ono and Yang [7] deduce that the 
reduction map is surjective for \D\ sufficiently large. Denote the (finite) set of such D 
for which the reduction map is not surjective by £p and define 8'^ := {\D\ : D G Sp}. 
We will say that Dp G M is a good bound for p if max Sp < Dp (suppressing p when the 
context is clear). 

Although Sp is finite, no explicit good bound is given above due to the ineffective 
nature of Siegel's lower bound. In this paper we will present an algorithm which will 
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input a prime p and return the set 8p. This algorithm is conditional upon the Gener- 
alized Riemann Hypothesis for Dirichlet L-functions and also the Generalized Riemann 
Hypothesis for the L-series of weight 2 primitive newforms (henceforth simply denoted 
GRH). In particular, the algorithm will terminate unconditionally, but the correctness is 
dependent on GRH. The assumption of GRH will allow us to use techniques developed 
by Ono and Soundarajan [22] to explicitly compute a good bound for p. 

Theorem 1.1. Let a prime p he given. Conditional upon GRH, there is an effectively 
computable good hound for p. 

Explicitly computing the bound given by Theorem 11.11 for p < 107 we obtain the 
following. 

Theorem 1.2. Assuming GRH, 3.257 x 10^^ is a good hound for p < 107. Moreover, 
TahleUJl in appendixlAl contains good hounds for each p < 107. 

After obtaining the good bound Dp from Theorem 11.11 it only remains to explicitly 
compute the set of |D| < Dp for which the mapping is not surjective. For each supersin- 
gular elliptic curve E/¥p2 we will construct a positive definite (ternary) quadratic form 
Qe such that Qe represents \D\ if and only if there exists E' with CM hy Od which 
reduces to Qe- Since there are only finitely many supersingular elliptic curves we then 
merely need to check which |-D| < Dp are represented by each Qe- 

One may then use the algorithm by Fincke and Pohst [8j to determine a vector of 
length \D\. The usual implementation returns all vectors so running this algorithm 

for each \D\ < Dp to determine Sp is Q (^Dp^^ "^^ and the calculation quickly becomes 

infeasible for moderately large Dp. We hence want to take advantage of the fact that 
we do not need all representations of l^l but rather only one. In the case where E is 
defined over ¥p we are able to use a classification result of Ibukiyama [T2j to develop a 
specialized algorithm which determines more efficiently the set of |D| < Dp which are 
represented (see Section [5]). This algorithm has allowed us to compute the full set Sp for 
p= 11,17, and 19. 

Theorem 1.3. Assuming GRH, the following hold. 

(1) The set Sn is given hy 

= {3,4,11,67,88,91,163,187,232,235,427499,595,627, 

715, 907, 1387, 1411, 3003, 3355, 4411, 5107, 6787, 10483, 11803} . 

(2) The set Sn satisfies H^Sn = 91 and maxS'ij = 89563. 

(3) The set Sig satisfies #£^19 = 45 and maxS'ig = 27955. 

Having established such surjectivity results, one may ask whether similar results can 
be shown about the multiplicity of the reduction map. This question was addressed and 
an unconditional but ineffective solution was given by Elkies, Ono, and Yang [7]. 
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Define the Hilbert class polynomial Tinix) G as the unique monic polynomial 
whose roots are precisely the j-invariants of the elliptic curves with complex multipli- 
cation by Ou- These roots are referred to as singular moduli of discriminant D. The 
degree of the Hilbert class polynomial is h{D). Define further Sp{x) G ¥p[x] to be the 
polynomial with roots precisely the j-invariants of the supersingular elliptic curves of 
characteristic p. 

Theorem (Elkies-Ono-Yang [7]). For a prime p and t G N, every sufficiently large 
fundamental discriminant D < for which p does not split in Od satisfies 



S„(x) I Hnix) 



over ¥p[x] 



Here the implied constant depends on p and t. Their result states that for sufficiently 
large D there are at least t nonisomorphic elliptic curves with CM hj Od which reduce 
to each supersingular elliptic curve of characteristic p. We are again able to obtain an 
effective but conditional result of this nature. For a supersingular elliptic curve E, define 
We to be the number of automorphisms of E and take the canonical measure 

where the sum is taken over all supersingular elliptic curves of characteristic p. We will 
denote the minimal value of this measure by /ip. 

Theorem 1.4. Assume GRH. For a prime p and < c < 1 there is a effectively 
computable constant Dp^c G N such that every fundamental discriminant D < with 
\D\ > Dpc for which p is not split satisfies 

over ¥p[x\ . 

Since h{D) oo effectively a.s D —oo (Oesterle [19] unconditionally showed the 
growth is n{log{\D\Y-^), but Siegel [21] obtained n{\D\^/'^~^) conditional on GRH), 
we also get an effective but conditional version of Elkies, Ono, and Yang's result by 
choosing for each t G N an integer Dp^t > -Dp,c large enough so that c^ph{D) > t for 
every \D\ > Dp t. In Section[3]we will see that Theorem [T31 reduces to the same argument 
given to show Theorem 11.11 but we will not explicitly compute the bound here. 

The paper will begin by reviewing the connection between theta series and Sp in 
Section [21 In Section [31 we review how the bound for coefficients of theta series is 
obtained. Given the connection from Section [21 this gives a good bound for p, dependent 
on numerically calculating certain constants. In Section [H we fix a basis and decompose 
a certain space of modular forms in order to calculate some of the constants obtained 
from Section [3l Furthermore, we give explicit algorithms for calculating the remaining 
constants. In Section [5l we use a trick based on the Ibukiyama's classification [12] of 
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the set of supersingular elliptic curves defined over Fp, in order to calculate the set of 
\D\ < Dp which are generated hj Qe- Finally, in Appendix |X] we give the data obtained 
by explicitly implementing the algorithms from Sections H] and [5] for p < 107. 

Acknowledgements. The author would like to thank T.H. Yang for his help and guid- 
ance and would also like to thank K. Bringmann, K. Ono, and J. Rouse for useful 
comments. 

2. CM Liftings of Supersingular Elliptic Curves and Theta Series 

For a supersingular elliptic curve E we will say that De is a good bound for E if 
E is in the image of the reduction map for every \D\ > De- Hence we will piecewise 
determine a good bound Dp for p by determining a good bound De for each supersingular 
elliptic curve E/¥p2 and then taking Dp := max^; De, relying on the fact that there are 
only finitely many supersingular elliptic curves (up to isomorphism). This also aids in 
computing the elements D & Sp with |-D| < Dp, since we only need to check all \D\ < De 
for each curve, and not up to the larger bound Dp. The theory involved in determining 
De goes through quaternion algebras, quadratic forms, theta series, and modular forms. 
For background information on elliptic curves a good reference is Silverman's book |25j . 
A good reference for quaternional algebras is Vigernas's book [22], while Ono's book 
[2T] contains a good introduction to modular forms. Good sources of information about 
quadratic forms can be found in Jones' book [13] and O'Meara's book [20] . 

Let E/¥p2 be a supersingular elliptic curve. An elliptic curve E with CM by Od 
is a CM (by Od) lift of E if the reduction of E equals E. We will now review the 
connection between CM liftings and theta series. Let Re '■= End{E) be a maximal 
order of the quaternion algebra Bp/Q ramified precisely at p and infinity. For p inert 
in Od (resp. p ramified in Od) there is a one-to-one (resp. two-to-one) correspondence 
between lifts of E and embeddings of Od in Re- Gross and Zagier [Til Prop. 2.7] cover 
the case of p inert and Elkies [6l p. 168] extends this to the case where p is ramified. 
Let Le := {x G Z -|- 2i?£;|tr(x) = 0} be the Gross lattice with the associated positive 
definite ternary quadratic form Qe given by the reduced norm on Le- 

For a positive definite ternary quadratic form Q we will define the theta series of Q 

by 

9{z) := 9q{z) := J] gW,c)^ 
where z is in the upper half plane and q := e^'^*^. Denote the theta series of by 

xGLe d<0 

d=0,l (mod 4) 

Noting that we = H^R*e^ Gross [TDl Prop. 12.9, p. 172] has shown that aE^D) equals 
times the number of embeddings of Od into Re. It is hence sufficient to proceed 
by bounding the coefficients of the theta series from below, and showing that they 
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must be positive whenever \D\ > De- However, Gross showed that is a weight 3/2 
modular form in Kohnen's plus space (see [T7] or [2TI p. 54] for a definition) of level 4p 
and explicit bounds (conditional on GRH) for coefficients of theta series in this space 
were established by the author [15]. The methods used to obtain these bounds will be 
reviewed in Section [31 



3. Background 

This section is a brief summary of the theory used to bound the coefficients of 9e- 
The theta series is first decomposed into a linear combination of an Eisenstein series and 
a basis of weight 3/2 Hecke eigenforms. Using an isomorphism to weight 2 cusp forms, 
the coefficients of the Hecke eigenforms are then compared with the central values of 
quadratic twists of L-series of weight 2 newforms. The central value of these L-series are 
bounded in the authors's generalization [T3] of Ono and Soundararajan's paper [22] in 
terms of constants which we will introduce here. Section H] will be devoted to explicitly 
determining the basis of weight 3/2 Hecke eigenforms, the isomorphism to weight 2 
newforms, and explicitly bounding these constants. 

For G Z and G N we will denote the space of (holomorphic) modular forms of 
weight k and level by Mk{N), the cuspidal subspace by Sk{N), and the space of 
newforms by Sl™{N). Moreover, for /c G |Z \ Z we will denote Kohnen's plus space of 
level 4iV by M^(4A'") and the cuspidal subspace by S^{4:N). For a modular form g, we 
denote the n-th Fourier coefficient by ag{n). 

Let (7,. be a basis of Hecke eigenforms in Sy^{4:p) and define the Eisenstein series 

^ d<0, d=0,l (mod 4) " 

where H{d) is the Hurwitz class number and p^'* is the highest power of p dividing the 
square part of \d\. In particular, for D < a fundamental discriminant, H{D) equals the 
class number of the imaginary quadratic field Q(V^) divided by the number of units 
modulo ±1. Gross[ID] has shown that 6e — Hq G S^i^{Ap). We hence decompose our 
theta series as 

tp-i 

e = He + ^hgi, 

4 = 1 

for some hi G C. Here tp is the number of distinct conjugacy classes of maximal orders 
of -Bp, called the type number. 

For a fundamental discriminant < with corresponding Kronecker character xdi 
define the |D|-th Shimura correspondence S\]:,\ by 



n=l n=l 
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for every g G S^j^i^p)- Here and throughout we denote the image of g under an operator 
T by g\T. Shimura [23] showed that g\S\D\ G 52(4^) and that S\d\ commutes with every 
Hecke operator, namely 

fh/2Ti-i\S\D\ = {f\St)\2Ti 

for every / G S^^^{4:p) and every prime i ^ p. Let ti G Z>o be minimal with 4 | ti 

and —ti a fundamental discriminant satisfying ag^{ti) ^ 0. If are chosen so that 

X]j=i '^j^gi^j) 7^ for every 1 < « < tp — 1, then Kohnen [17] has shown that the linear 
combination of Shimura correspondences 

(3.1) S:=Y,tSu. 

i=l 

called a Shimura lift, forms an isomorphism from S^^^i^p) to S'f°™(p) = 5*2 (p) which 
sends Hecke eigenforms to Hecke eigenforms. 

Denote the Shimura lift gi\S by Gj. For a fundamental discriminant D < and 
Re(s) > 1, we denote the L-series of x Xd by 



Lis) ■.= Lix,s) -.= ^2 



n" 

n=l 



and for Re(s) > | we denote the L-series of Gi twisted by x 

.x{n)aG,{n) 



oo 



(3.2) L,{s) ■.= L{Gi,D,s) := ^ 



n=l 



The conductor of Lj(s) is q := p|-Dp. Denote by mj the smallest integer such that 
agXrrii) ^ with {p^rrii) = 1. 

Using the fact that Gi is a Hecke eigenform, the author [13] showed that any funda- 
mental discriminant D < satisfying a5)(|D|) = must also satisfy 



(3-3) ^^-^;;nwl^l^< 



where 



LAD 

}_^Ci 



(3.4) Q := 

L{Gi,mi, l)m^ 

is a constant which comes from taking the ratio of the |D|-th coefficient and the mj-th 
coefficient in the Kohnen-Zagier formula [18]. Define 



(3.5) F{s):=FAs) 



2tx ) L{s)L{2 - s) 
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and choose 1 < cr < |. To obtain a contradiction from equation fl3.3p for \D\ sufficiently 
large, it remains to bound F{1) = from above. 

Since equation (13. 3p is obtained by assuming a^d-Dl) < and rearranging, we can 
similarly assume agdZ^I) < caHg{\D\) for a constant < c < 1 and obtain equation 
(13. 3p with the left hand side multiplied by 1 — c. Hence Theorem 11.41 is also reduced to 
bounding -F(l) and the details are left to the reader. 

We will describe briefly how Ono and Soundararajan [22] bounded F[l). By the 
functional equation of F{s) and the Phragmen-Lindelof principle we have 

F(l) < maxF(a + it), 

so it suffices to bound F{a + it) from above for every t G M. 

For a real number X > and an L-series L{s) with c > real chosen such that s + c 
is in the region of absolute convergence, consider the integral 

(3.6) / ^{s + w)T{w)X'"dw. 

J c—ioo L 

On the one hand, if L[s) = ^^j^ in the region of convergence, then (13.60 can be 
computed as the sum 



^ A(n)a(n) 



n=l 



using the fact that 



PC+lOO 




/ r(i.) 




/ c—ioo 





w oo 



m=0 



ml \X 



n 



which follows by shifting the integral Re(w) — ^ —oo and counting the residues at negative 
integers. On the other hand, we can shift the original integral to the left and count the 
contribution from residues at each of the poles. The contribution from w = gives 
The assumption of GRH allows us to determine the real part of all of the poles coming 
from since these correspond to zeros of Lis). Rearranging the resulting equation 

gives a formula for y^^) which we integrate to get a formula for log |-^(s)|, as shown by 
Ono and Soundararajan [22l Lemmas 1-2]. 

Using the above argument with L{s) = L{s), we define for Re(s) > 1 the integral of 
equation (13. 7p by 



(3.8) G{s,X):=J2 



A(n)x(T2) 

log(n) 

n=l ^ ' 



■e 
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Similarly, with Aj defined so that t^(s) = ^ '^'("■)^(") when Re(s) > 3/2, define 

^ n=l " 



n=l 



(3.9) Fi(s,X):=^ 
and 

^n"'log(n) J 

For s = cr + zt, Sq = 2 — cr + and S2 = (72 + for any choice a < (72 < 2, 
the following bound [13] was obtained for -F(s). For certain explicit constants cg^„^x,i, 

Ce,cr,X,t,l, Ce,a,X,m,li Ce,cT,X,2i Ce,a,X,t,2i and C0^a^x,q,2 

X X((2 + 7(X)HX)-/j(X) ^ ^ 

' Re(G(so, X)) - Re(G(s, X))) + ce,^,x,2 + C0,a,x,t,2 + C0,<x,x,g,2 



X- 1-5(X)X 

- (ce,a,x,i + C0,a,x,i,i + ce,a,x,m,i) + log|r(s)| -21og|L(s)|, 

where a(X), /3(X), 7(X) and (5(X) are defined in the author's previous paper [15] 
in equations (7.2), (7.1), the line directly proceeding (7.1), and the first equation in 
Section 6, respectively. Moreover, in Section 8 of that paper, explicit bounds in terms 
of F-factors are given for a(X), /3(X), 7(X), and 5(X). 

The decay in F(s) cancels polynomial growth in t from cg,(j^x,t,i- Since ct > 1, L{s) 
converges absolutely, so we can explicitly calculate a bound for 2 log \L{s)\ as well. The 
other terms involving F, G, and Fi are also dealt with [15] (Here, we use cancellation 
in the sums for small n between terms from 2 log |i^(s)|, and then bound the remaining 
terms separately). We will give further details in Section H] of how to compute better 
bounds for these constants. 

Therefore, the main goal of this paper will be to decompose Kohnen's plus space, make 
a choice of gi, determine a Shimura lift, and then calculate bi and Cj. This is described 
in Section m Moreover, in feasible cases we must determine an algorithm to determine 
whether |-D| is represented by a fixed form Q. A specialized algorithm is given in Section 
Elto determine this whenever the corresponding elliptic curve is defined over ¥p. 

4. Algorithm to compute De and Dp 

This section is broken into four main subsections. We first determine the set of theta 
series 6e for every supersingular elliptic curve E/¥p2. We then determine a basis of 
Hecke eigenforms {g^ : i G {1, . . . ,tp — 1}} for the subspace of S^^^ip) generated by 
these theta series and express the cuspidal part of the theta series as a linear combination 
of these eigenforms. The third step will be to compute an explicit Shimura lift S from 
5*^2 (4p) to 5*2 (p) and finally we compute the constants corresponding to Gi = gi\S. 
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4.1. Calculating the Theta Series. Let p be a prime and C > be an integer. We 
will describe here how to obtain the quadratic forms Qe and the first C coefficients of 6'^; 
for every supersingular elliptic curve E/¥p2. If C is chosen too small for the remaining 
calculations, then we will simply double C and rerun the calculations. 

We begin by calculating the maximal orders Re using Kohel's [16] algorithm built into 
MAGMA. These are obtained by first using a function to calculate a single maximal order 
R, then calculating all left ideal classes Jj of R, and finally calculating the right order Ri 
of li, which will give a full set of maximal orders. We will represent i?^; as a 4 x 4 matrix 
over Q. Let the standard basis of Bp over Q be given by l,a,(3 and 7 = a(3 = —/3a 



with a'^ = p and P"^ = q for some prime q = 3 (mod 8) for which ( — ) = —1 (cf. 



p!2l p. 1]). Then a matrix A will correspond to the Z-module which is generated by 
Aij + A2ja + AsjP + ^4,j7- It is then straightforward to compute Le and the method 
of Fincke and Pohst [8] may be used to compute the coefficients aE{d) for every d < C. 

4.2. Decomposition of 9e- We will now compute a basis of (cuspidal) Hecke eigen- 
forms Qi, ■ ■ ■ gtp~i of the space spanned by all of our theta series and then decompose 
the cuspidal part qe '■= Oe — Hg in terms of these Hecke eigenforms. This will give us 
the coefficients bi from section [31 

A computational solution to the decomposition problem for integral weight forms 
follows from the work of Stein [26] on modular symbols. We recall that Kohnen [17] 
has shown that the Hecke algebra on S^^2i^P) isomorphic to the Hecke algebra on 
Qncw^p^ _ (p). Furthermore, Sturm has shown for 6*2 (p) that a finite set of Hecke 
operators generates the Hecke algebra and has given an effectively computable bound 
N so that {Tn\n < N} generates the Hecke algebra [28]. The Hecke eigenspaces of 
distinct normalized Hecke eigenforms on 5*2 (p) are at most one dimensional (that is, 
5*2 (p) satisfies (strong) multiplicity one, cf. [21], p. 29]). Therefore Sy^^ip) also satisfies 
multiplicity one. 

We first note that the space generated by our theta series is invariant under the 
action of the Hecke algebra, so that the space is generated by the set of qe (which 
have coefficients in Q). Since S^^^i'^P) has multiplicity one, we can diagonalize the 
Hecke operators T := T„2 simultaneously. We only need to diagonalize the operators for 
n < N, where is the Sturm bound on 5*2 (p) as above. Checking computationally, it 
appears as though a single qe ='■ g always generates the entire space under the action 
of the Hecke algebra (we have checked for all p < 1000) and we will demonstrate how to 
obtain a basis of Hecke Eigenforms in this case. This assumption is not really restrictive 
because one merely needs to follow the same argument for the forms Qe^^ 9e2^ ■ ■ ■ until 
the dimension equals tp — 1. We may also choose a particular T such that g\T'^ generates 
the entire subspace (see Stein's book [23, p. 167]). 

Given g and T as above we calculate g\T^ for every < m < tp. Then using linear 
algebra over Q we obtain g\T^p~^ as a linear combination of g\T"^ with < m < tp — 1, 
giving a matrix Mt with rational coefficients. Let F be the Galois splitting field over Q of 
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the characteristic polynomial of Mt- Since g\T'^ has coefficients in Q we can diagonalize 
Mt to obtain Hecke eigenforms with coefficients in F. Since S'^i^{Ap) has multiplicity 
one and T generates the whole space, the eigenspace of a given eigenvalue has dimension 
one. Hence we may calculate with linear algebra over F the unique eigenform gi with 
eigenvalue Aj. 

We can now decompose each qe a, linear combination of the gi by linear algebra 
over F. This gives the desired coefficients hi E F in the decomposition 

9e = ^ hgi- 

1=1 

4.3. Finding a Shimura Lift. Having established the Hecke eigenforms gi, we will 
now choose and as in equation (13. ip to establish a Shimura lift. We will recursively 
choose t£ and such that 

e 

S{i) ■.= Y.r,St, 
i=i 

satisfies gi\S{i) = if and only if ag^{tj) = for every 1 < j < i. 

At each step we choose i smallest such that gi\S{i — 1) = 0. We then choose ti to 
be the smallest integer with 4 | t^, —te is a fundamental discriminant, and agXte) 7^ 0, 
noting existence has been shown by Kohnen [I?]. It remains to choose rg such that for 
every k we have Yl^j=i''^j^gki^j) = if and only if ag^(tj) = for 1 < j < Since 
F = Q(a) is a number field we may consider F as a vector space over Q with basis a*. 

Let k be given such that agf,{tj) 7^ for some j. If cLgi^iti) = 0, then we know by 
inductive hypothesis that gk\S{i — 1) + riSt^ 7^ for any rg. If ag,^(te) 7^ 0, then writing 
it in terms of the basis, we have dg^^itg) = Y^dmOi^ with some dm 7^ 0. Computing 

i-i 
i=i 

and rewriting in terms of the basis, we write the coefficient Cm G Q of a^. We then take 




Taking := max^r^^fc, we have 

\rgdm\ > \era\ 

and hence ridm + 7^ 0. It follows that gk\S{i) 7^ because the coefficient of a*" in 
the ffist Fourier coefficient is nonzero. Since k was arbitrary, we have gi\S{i) = if and 
only dgiitj) = for every 1 < j < ^, as desired. We then terminate if gi\S{i) 7^ for 
every i and otherwise continue the recursion. 
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4.3.1. Calculating Ci. Recall first that 

for nii a fixed integer such that ag^{mi) ^ and mj ^ (mod p) and Gi = gi\S. We 
may simply choose rrii to be the smallest such integer. In the bounds that we obtain it 
will suffice to bound |cj| from above. 

We have already shown how to calculate ag- [rrii), so it remains to calculate L{Gi, mj, 1). 
We use the following formula of Cremona |T], 

oo 

L{Gi,mi,l) = ^2aL(n)x(n)e^^^^^. 

n.=l 

Calculating the partial sum up to a fixed bound and noting by Deligne's optimal 
bound [2] that |ai(?7,)| < (To(n)n2, we may bound the error easily by pulling the absolute 
value inside the sum for n > N. 



4.4. Calculating the other constants. These constants are actually fairly easy to 
calculate once we show clearly where they come from, given the theoretical results stated 
in the author's previous paper [15]. The methods involved and notation used are similar 
to those used by Ono and Soundararajan [22] • 

Most of the constants obtained are explicit in terms of F and ( factors along the real 
line, but we need some work to calculate the terms involving F, Fi, and G (coming 
from equation (13. 7p . Define v{n,X) by 

Ai(n)e-"/^ log(n)Ai(n)e-"/^ 
v[n,X) := C0,x,i,F h Ce,x,i,Fi 

/A(n)e^"/^ A(n)e-"/^ 

- Ce,X,2,G — 

y ^CTQ no- 
where a = Re(s), (To = Re(2 — s), and a2 = Re(s2), so that 

E^^e f^n^^(^' = ce.xxFMF{s, X)) + c,,x,i,F,Re(Fi(s2, X)) 
^ \?7.*Mog(n) / 

-Cg,X,2,GMG{So,X)-G{s,X)). 



We will bound the following to get a constant independent of the variables involved. 
From above, we need to bound 



(4.1) -21og|L(s)| +2^Re 



n=2 



n'^ log(n) 



12 BEN KANE 

Noting that s is in the region of absolute convergence, 



oo 



log(|i^(^)|) = l^Re('^^^^^log(n; 



n=2 

Then equation (14.11) becomes 



-21og(|LWI) + 2$:Re(4;)^)=-2 j: Re (4^) 

Therefore, taking the absolute value inside the sum gives 



x{n)A{n) 



log(n) 



S2 E ;^ = 2i„g(icMi)-^;^ 

n=Aro+l ' n=2 ^ 



and this final finite sum and C,{(t) are easily computed. 

We also need a bound for the constants depending on t, the imaginary part of s. We 
use the functional equation of the F factor to remove the growth from these terms. Since 
the growth is logarithmic in t we easily obtain 

(4.2) log |r(s) I + ce^xxt - C0^x,2,t < \og\T {a + r)\ 

for some r G N. 

A computer is then used to bound 

' X(n) ( , ^> 2A(n)' 



n=2 



n** log(n) \ n° 



Notice that the term we are subtracting is exactly the term being added in equation 
7\\ . The only nonzero terms are p powers, so the maximum is taken by calculating 

j^^^^ {v{n, X) — j for each n = and then noting that either x{p^) = x{p)^y 
which is either one or alternates. Finding the t which maximizes this sum for each p, 
independent of whether the sum alternates or not, gives the bound, since we then add 
up the absolute value of each of these terms together. 

It remains to bound the terms coming from equation (13.71) with n large. We will hence 
look at 

(4.4) y Re( .^}''] A v{n,X)) 

Notice first, since 02 > o", that for n sufficiently (namely we choose Nq such that this 
occurs for n > Nq) the term from the Fi part of v{n, X) satisfies the bound 

log(ra) ce,x,i,F 
ce,x,i,Fi — -— S — • 
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Therefore, we see that 



\v(n 



Since Aj(n) < 2y/nlog{n), we can further bound this by 

''^'^'■"^m.m((T-l/2,(To) 

In [in], we have shown for a = min(cr — 1/2, cq) an exphcit constant c^o such that 



(4 5) H(a X) ■= V ^Ml^e-/- 

n=Aro+l ' 

We then calculate the incomplete Gamma factor r(l — a,No/X) (cf. [9]), giving the 
desired bound. 



5. Determining CM Lifts for \D\ < De when E is Defined over ¥p 

In this section, we give an algorithm to determine whether E/¥p is in the image of the 
reduction map from elhptic curves with CM by Od for a fixed D to deal with \D\ < De- 
It is based on a classification of Re given by Ibukiyama [T2] . 

5.1. Calculating which \D\ are Represented by the Gross Lattice. 

Lemma 5.1. Let E be a supersingular elliptic curve defined over¥p, Le he its associated 
Gross lattice, and be the lattice of trace zero coefficients. Then there exists a lattice 
L satisfying Le ^ L C. R% such that the reduced norm on L is 

Qix, y, z) = px'^ + ihy"^ + fyz + cz^). 

Proof. Since E is defined over Fp, Ibukiyama [12] has shown that Re is of one of the 
following two types, 

(5.1) R(,,r) :=Z + zl±j^ + z"'^;''^>+z''- + °>^ 
or 

(5.2) R!{q, r') := Z + + Z/? + Z^^^^^^' 

where g is a prime satisfying q = 3 (mod 8) and (^~^^ = — 1, = —p, P"^ = —q, 

a(3 = —(3a, + p = (mod q) and r'^ + p = (mod 4g) in the case when p = 3 
(mod 4). 
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For Re = R{q,r) with basis 71 := /?, 72 := and 73 := R% is 

generated by 71, 72, 73 while L^; is generated by 71, 272, 273. We take L to be the lattice 
generated by 71, 272, 73. If an arbitrary element of L is written X71 + 2?/72 + ^73, then 
the change of variables x' := x — ry, y' := z + qy and z' := y gives the reduced norm 

p{x'Y + ^-^ivT + piz')' + 2rx'y\ 

q 

as desired. Changing z to 2z above implies that z' = y' (mod 2), so that the reduced 
norm on L^; is precisely the quadratic form given above with z' = y' (mod 2). 

If Re = R'{q,r'), we have a simpler task. In this case, the reduced norm on R^ is 
simply 

2 2 (r'y + p 2 / 

px + qy H z + r yz. 

4g 

To get the elements of the Gross lattice, we simply multiply y and z by 2 to get 



Q'(x, y, z) := px"^ + (4g)?/^ + ^lLL^IJ^z'^ + (Ar')yz. 

q 



□ 



Given Lemma [5.1^ the reduced norm on Le is either of the form 



Q{x', y\ z') := q{x'f + "-^{y'f + p{z'f + 2rx'y\ 

q 

with z' = y' (mod 2), or 

( y'X^ -|_ r» 

Q'ix, y, z) := px"^ + (4g)i/2 + ^^^^ -z"^ + Ur')yz. 

q 

To check if an integer n is represented, we first set two integers M and and do a 
precomputation for efficiency. For Q, we do a precomputation of the two sets 



2 

SEm ■={n<M:n = q{x'f + ^—^{y'f + 2rxy\ y' even}. 



q 

and analogously 



2 

SOm ■={n<M ■.n = q{x'f + ^—^{y'f + 2rxV, odd}. 

q 



Since we know that, with x' fixed, the minimum value is obtained at xdiv := {q—^^^)x''^-i 



we run x' from to (;;^) and then from to -^^^ , and simply 



2rx'+jAr'^x'-ie+li.(q{x'y-M) 



2V+2IZ. 
9 



calculate n = Q{x', y', 0). If y' is odd, we add n to SOm, and if y' is even then we add 
n to SEm- 
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Similarly, for Q\ we calculate 

Sm:= {n<M ■.n = Q'{Q,y,z)}. 
Given SEm and SOm, we now calculate 

Tn,m := {n < N : n = m + p{z'Y, m E SEm and z' even, or m G SOm and z' odd}. 
Notice that, if we define 

Tn ■.= {n<N ■.n = Q{x\ y', z'), y' = z' (mod 2)}, 

then Tm C T^^m ^ ^a^- Therefore, for every n e Tj^^m, we know n G T/v, and for every 
^ T/v,M with n < M, we know n ^ T/y. Since we expect that after a low bound M 

we will not have any such eligible elements which are not in T^r, we can set M lower for 

optimization purposes. 

We now describe the algorithm to calculate T^^m- For each eligible \D\ < N, we 

check from z' = to z' = • For each z', if z' is even, then we check 

if \D\ — p{z'y G SEm, and if z' is odd, we check if \D\ — p{z'Y ^ SOm- If so, then 
we add to Tj^^m- The algorithm for Q' is entirely analogous, only needing to check 
membership in Sm instead of breaking it up into the even and odd cases. We know that 
np'^ G Tn,m if and only if n G Tn^m, so we can skip checking these cases. 

We shall show that the running time for this function is 0{p + NM^^"^). We need time 
0{M) to calculate SEm and SOm- Calculating the modulus of p which are eligible takes 
time 0{p). For each D, we have to check at most M^/^ possible z'. Therefore, since there 
are 0{N) such D, this calculation takes 0(iVM^/^). Thus, the overall running time is 
0{M + p + NM^/^) = 0{p + NM^/^) (since we will choose N > p, we have 0{NM^^'^)). 

Notice that for an individual n ^ T^^m, we can check membership in T/v in 0{N^^'^) 
time by calculating checking membership in SE^- and SO^ (or S^ for O'). By doing 
this clS cL precomputation again, we get a running time of 0(A^ + N'^^'^E) where E is the 
number of exceptional D ^ Tm,m- Therefore, if we choose M so that E < {NMY^'^, 
then we can calculate T^r in 0{N M^^"^). 

Appendix A. Data 

We will now use the algorithm from Section |4] to compute good bounds for p < 107, 
using X = 455, a = 1.15, A^'o = 1000, and (72 = 1.3256 (These were chosen by a 
binary search for a and a heuristically based search for a2 given a.). Tables [l], [2|, [3l 
and m will give the good bounds for E. Combining the good bounds for every E/¥p2 
we obtain good bounds for p in Table [TTl For each maximal order Re, we will list the 
prime p, then the size of the field ¥q [q = p or q = p"^) which the corresponding elliptic 
curve is defined over. We will then list the corresponding ternary quadratic form as 
[a, b, c, d, e, /] = ax"^ + by"^ + cz"^ + dxy + exz + fyz. We then list a good bound Dq for 
E which suffices when {D,p) = 1, and a good bound Di which also suffices when p \ D. 
We separate these cases since a better bound is obtained for D relatively prime to p and 
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Table 1. Good Bounds De for E/¥p2. 



p 




Quadratic Form 


^0 


Di 




V 


I A 11 ion A ^\^ 

[4,11,12,0,4,0] 


1.813 X iO 


o IPO X y 1 nS 

3.163 X iO 


± J- 


P 


f3 1 ^ 1 ^ -9 9 141 


5 1 49 X 10^ 


8 973 X 1 0^ 


17 


P 


[7,11,20,-6,4,8] 


1.002 X 10^° 


1.748 X 10" 


17 


P 


[6,26,26,-2,2,22] 


o ^ CO 1 nl3 

8.652 X iO 


1 c 1 n xy 1 nl5 
1.510 X 10 


19 


P 


[7,11,23,-2,6,10] 


3.020 X 10^ 


5.270 X 10^° 


19 


P 


[4,19,20,0,4,0] 


9.198 X 10^^ 


1.606 X 10^3 


23 


P 


[8,12,23,4,0,0] 


7.459 X 10^° 


3.700 X 10" 


23 


P 


[4,23,24,0,4,0] 


2.050 X 10^^ 


2.522 X 10^5 


23 


P 


Tool oi ooor\l 

[3,31,31,-2,2,30] 


8.297 X 10 


6.955 X 10 


29 


P 


[11,12,32,8,4,12] 


6.739 X 10^1 


1.008 X 10^2 


29 


P 


[8,15,31,4,8,2] 


3.836 X 10^3 


3.130 X 10^^ 


29 


P 


[3,39,39,-2,2,38] 


1.900 X 10^^ 


1.550 X 10^^ 


31 


P 


[7,19,36,-6,4,16] 


3.836 X 10^2 


4.359 X 10^3 


31 


P 


[8,16,31,4,0,0] 


1.245 X 10^3 


2.069 X 10^^ 


31 


P 


[4,31,32,0,4,0] 


8.558 X 10^4 


1.008 X 10^6 


37 


p2 


[15,20,23,-4,14,8] 


2.101 X 10^^ 


3.667 X 10^2 


37 


P 


[8,19,39,4,8,2] 


6.399 X 10^3 


1.117 X 10^5 


41 


P 


[11,15,47,-2,10,14] 


1.834 X 10^^ 


3.201 X 10^^ 


41 


P 


[12,15,44,8,12,4] 


2.520 X 10^^ 


7.830 X 10^5 


41 


P 


[7,24,47,4,2,24] 


1.967 X 10^^ 


1.447 X 10^*^ 


41 


P 


[3,55,55,-2,2,54] 


4.375 X 10^^ 


3.579 X 10^8 



skipping {D,p) = 1 is a computational gain. We omit here the primes 3, 5, 7, and 13, 
since we have Dp = 1 trivially. 

For N e N U {oo}, let be the set of positive integers n < N with p"^ \ n not 
represented hy Qe- We omit those n with p"^ \ n since p is an anisotropic prime and 
hence n is represented if and only if ^ is represented. In Tables El El [71 [HI El and [ID] we 
will list Se computed using the method described in section [51 when E is defined over Fp 
and otherwise using the standard method [8] . For each elliptic curve we have chosen A^o 
and Ni and compute and {n G £E^\n = (mod p)}. When is small we will 
list the full set while we will otherwise simply list and max(£^^). Although we 
are only able to determine Sp for p = 11, 17, 19 under GRH, we are able to determine 
Se '■= £'e for a number of forms, which we will denote by an asterisk next to the form. 
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Table 2. Good Bounds De for E/¥p2. 
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p 




Quadratic Form 


^0 




43 


IT 


[15,23,24,2,8,12] 


2.565 X 10^2 


4.476 X 10^^ 


43 


V 

IT 


11,16,47,4,2,16 


4.056 X 10^^ 


7.079 X 10^^ 


43 


P 


[4,43,44,0,4,0] 


1.364 X 10^^ 


2.379 X 10^^ 


47 




[12,16,47,4,0,0] 


1.492 X 10^"^ 


2.604 X 10^^ 


47 




[7,27,55,-2,6,26] 


1.080 X 10^^ 


1.527 X 10^^ 


47 


F 


[8,24,47,4,0,0] 


1.056 X 10^^ 


1.842 X 10^*^ 


47 


F 


4,47,48,0,4,0 


2.339 X 10^^ 


4.082 X 10^^ 


47 


F 


[3,63,63,-2,2,62] 


3.702 X 10^^ 


6.461 X 10^^ 




P 


[90 9^? ^^9 19 4 9nl 


1 1 74 V 1 


1 ZL98 V 1 

l.^ZiO A lU 


53 


V 

r 


[12,19,56,8,12,4] 


4.015 X 10^^ 


6.101 X lO^*' 


53 


V 


[8,27,55,4,8,2] 


5.825 X 10^^ 


4.883 X 10^^ 


53 


V 


[3,71,71,-2,2,70] 


6.918 X 10^^ 


5.467 X 10^^ 




P 




fiQ^i V 1 
u.uyo A lu 


1 .UU^ A lU 


59 


T> 

IT 


[15,19,64,-14,8,12] 


6.695 X 10^3 


7.662 X 10^^ 


59 


V 

F 


[7,35,68,-6,4,32] 


4.612 X 10^"^ 


2.426 X 10^^ 


59 


F 


[12,20,59,4,0,0] 


2.811 X 10^^ 


4.492 X 10^*^ 


59 


p 


[4,59,60,0,4,0] 


1.106 X 10^^ 


1.174 X 10^^ 


59 


p 


[3,79,79,-2,2,78] 


7.295 X 10^^ 


1.166 X 10^9 


61 


rP' 

r 


[23,24,32,16,4,12] 


8.254 X 10^^ 


6.927 X 10^^ 


61 


V 


[7,35,71,-2,6,34] 


5.007 X 10^^ 


2.545 X 10^'^ 


61 


V 


[8,31,63,4,8,2] 


5.892 X 10^^ 


2.803 X 10^"^ 


61 


V 


[11,23,68,-6,8,20] 


5.240 X 10^^ 


3.797 X 10^^ 


67 


9 


[23,24,35,8,2,12] 


5.517 X lO^'' 


9.628 X 10^^ 


67 


2 

p 


[15,36,39,-4,14,16] 


1.105 X 10 


1.928 X 10 


67 


P 


[16,19,71,12,16,6] 


1.207 X 10^^ 


1.987 X 10^^ 


67 


P 


[4,67,68,0,4,0] 


2.623 X 10^^ 


2.642 X 10^^ 


71 


P 


[15,20,76,8,4,20] 


7.313 X 10^^ 


5.485 X 10^^ 


71 


P 


[12,24,71,4,0,0] 


3.235 X 10^^ 


2.936 X 10^^ 


71 


P 


[15,19,79,-2,14,18] 


1.343 X 10^^ 


5.962 X 10^^ 


71 


P 


[16,20,71,12,0,0] 


1.693 X 10^^ 


1.667 X lO^s 


71 


P 


[8,36,71,4,0,0] 


1.450 X 10^^ 


2.531 X lO^s 


71 


P 


[4,71,72,0,4,0] 


2.876 X 10^9 


1.379 X 10^0 


71 


P 


[3,95,95,-2,2,94] 


2.725 X 10^9 


2.191 X 10^0 



18 



BEN KANE 

Table 3. Good Bounds De for E/¥p2. 



p 




Quadratic Form 


^0 




1 o 


P 


fl ^ '^Q zLD 9 8 9nl 


R Q7Q V 1 


1 1 A7 V 1 0^'^ 


73 


rP' 

r 


[20,31,44,-12,4,28] 


6.740 X 10^^ 


4.422 X 10^^ 


73 


V 

IT 


[7,43,84,-6,4,40] 


1.025 X 10^"^ 


5.334 X 10^"^ 


73 


V 


[11,28,80,8,4,28] 


1.767 X 10^^ 


1.452 X 10^^ 


79 


9 

p 


[23,31,44,18,16,20] 


2.150 X 10^^ 


2.481 X 10^^ 


79 


P 


[16,20,79,4,0,0] 


2.923 X 10^*^ 


3.458 X 10^'^ 


79 


P 


[19,20,84,16,8,20] 


5.009 X 10^*^ 


8.741 X 10^'^ 


7Q 


P 


|11,01,0 1 ,-iu,u,zuj 


1 1 1 9 V 1 ni"^ 

1 . 1 IZi A lU 


l.OUO A lU 


79 


V 


[8,40,79,4,0,0] 


1.169 X 10^^ 


1.503 X 10^^ 


79 


V 


[4,79,80,0,4,0] 


6.499 X 10^^ 


1.121 X 10^° 


83 


9 


[23,31,44,-14,8,12] 


4.054 X lO^*" 


6.477 X 10^" 


83 


P 


[12,28,83,4,0,0] 


1.721 X 10^*^ 


2.591 X 10^'^ 


83 


P 


[7,48,95,4,2,48] 


3.913 X 10^*^ 


6.251 X 10^'^ 


83 


P 


[16,23,87,12,16,6] 


8.775 X 10^^ 


1.328 X 10^^ 


CO 


P 


fl 1 '?1 Q9 fi 8 981 




Zi .O 1^ A 1 U 


83 


V 


[3,111,111,-2,2,110] 


4.776 X 10^^ 


7.089 X 10^^ 


83 


V 
ir 


[4,83,84,0,4,0] 


6.461 X 10^^ 


1.033 X 10^° 


89 


9 

P^ 


[23,31,48,2,12,16] 


3.896 X lO^'^ 


4.145 X 10^^ 


89 


P 


[19,23,95,-18,10,14] 


1.236 X 10^^ 


2.906 X 10^^ 


oy 


P 


97 Qf, ^AR 9nl 


9 fi'^fi V ^ 

^.\JO\J A lU 


o.o^o A lu 


89 


V 


[12,31,92,8,12,4] 


4.535 X 10^^ 


1.108 X 10^° 


89 


V 


[15,24,95,4,2,24] 


1.052 X 10^° 


1.811 X 10^° 


89 


V 
r 


[7,51,103,-2,6,50] 


2.994 X 10^° 


3.541 X 10^° 


89 


V 


[3,119,119,-2,2,118] 


1.017 X 10^2 


6.887 X 10^2 


97 


9 
P^ 


[23,39,51,-22,6,14] 


1.241 X 10^^ 


6.289 X lO^'^ 


97 


2 

p 


[15,52,55,-4,14,24] 


4.517 X 10 


2.630 X 10 


97 


P 


[7,56,111,4,2,56] 


2.204 X lO^s 


4.357 X lO^s 


97 




[20,39,59,-4,8,38] 


5.923 X lO^s 


1.541 X 10^9 


97 


P 


[19,23,104,-14,12,16] 


2.188 X 10^9 


7.815 X 10^9 


101 


P' 


[32,39,44,-12,28,20] 


8.477 X 10^^ 


3.603 X 10^^ 


101 


P 


[12,35,104,8,12,4] 


1.709 X 10^^ 


1.223 X lO^s 


101 


P 


[15,28,108,8,4,28] 


1.572 X 10^8 


3.193 X 10^^ 


101 


P 


[15,27,111,-2,14,26] 


5.261 X 10^^ 


3.388 X lO^^ 


101 


P 


[8,51,103,4,8,2] 


2.948 X 10^8 


7.940 X 10^^ 


101 


P 


[7,59,116,-6,4,56] 


2.341 X 10^^ 


1.015 X 10^9 
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Table 4. Good Bounds De for E/¥p2. 
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p 




Quadratic Form 


^0 




101 


V 


[11,39,111,-10,6,34] 


4.559 X 10^^ 


2.415 X 10^^ 


101 


V 


[3,135,135,-2,2,134] 


9.667 X 10^^ 


5.296 X 10^° 


103 


9 


[23,36,59,-4,22,16] 


1.076 X 10^*^ 


1.620 X 10^*^ 


103 


p 


[16,28,103,12,0,0] 


9.459 X 10^^ 


4.236 X 10^^ 


103 




[15,55,56,2,8,28] 


4.016 X 10^*^ 


5.313 X 10^^ 


103 


P 


[19,23,111,-10,14,18] 


1.645 X lO^'^ 


5.558 X 10^'^ 


103 


P 


[7,59,119,-2,6,58] 


1.765 X 10^'^ 


1.861 X 10^^ 


lUO 


P 


^9 1 (T? 4 n nl 

|0,OZ,1UO,^,U,UJ 


1 n'^9 V 1 


9 1 fin V 1 


103 


v 


[4,103,104,0,4,0] 


2.647 X 10^^ 


8.748 X 10^^ 


107 


9 
P^ 


[35,39,44,-18,32,4] 


1.769 X 10^*^ 


9.442 X 10^*^ 


107 


9 


[23,40,56,16,4,20] 


1.352 X 10^*^ 


2.102 X 10^'^ 


107 


P 


[16,27,111,-4,16,2] 


7.861 X 10^*^ 


1.256 X 10^^ 


107 


P 


[12,36,107,4,0,0] 


1.061 X 10^'^ 


1.694 X 10^^ 


1 (17 


P 


n Q 9^? 1 1 fi fi 1 fi 9ni 

|lc/,ZO,llU,-U,lU,ZU| 




^ 897 V 1 


107 


V 


[11,39,119,-2,10,38] 


1.105 X 10^*^ 


1.732 X 10^^ 


107 


'D 


[4,107,108,0,4,0] 


4.853 X 10^^ 


4.368 X 10^° 


107 


V 


[3,143,143,-2,2,142] 


1.102 X 10^° 


1.761 X 10^^ 


109 


9 


[32,44,47,20,28,36] 


4.420 X 10^*^ 


7.714 X 10^^ 


109 


9 


[23,39,59,10,14,22] 


5.539 X 10^*^ 


9.666 X 10^'^ 


109 


P 


[8,55,111,4,8,2] 


3.843 X 10^'^ 


5.604 X 10^^ 


1 r\f\ 

109 


2 

p 


[24,39,56,16,12,4] 


r\r\ r ^ , 1 r\ 18 

8.005 X 10 


1.397 X 10 


109 


P 


[11,40,119,4,2,40] 


4.199 X 10^9 


7.329 X 10^0 


109 


P 


[19,23,119,-2,18,22] 


1.341 X 10^0 


1.841 X 10^1 


113 


P' 


[35,39,47,-6,34,10] 


1.141 X lO^s 


1.133 X 10^^ 


113 


p2 


[23,40,59,8,2,20] 


2.158 X 10^8 


2.062 X 10^9 


113 


p2 


[20,47,68,-12,4,44] 


4.539 X 10^^ 


3.297 X 10^9 


113 


P 


[23,24,119,20,10,24] 


3.219 X 10^9 


1.853 X 10^0 


113 


P 


[19,24,119,4,2,24] 


1.649 X 10^9 


2.877 X 10^0 


113 


P 


[12,39,116,8,12,4] 


1.610 X 10^9 


1.029 X 10^0 


113 


P 


[3,151,151,-2,2,150] 


1.105 X 10^2 


1.041 X 10^^ 



Table 5. The set of exceptions 8^ ■ 



p Quadratic Form Nq/Ni Se or O^Se and max(£^£;)) 



11 [4,11,12,0,4,0]* 3 X 10^ 3, 67, 235, 427 



20 



BEN KANE 

Table 6. The set of exceptions . 



p 


Quadratic Form 


iVo/iVi 


or {j^E^ and max(ff )) 


11 


[3,15,15,-2,2,14]* 


1010 


4, 11, 88, 91, 163, 187, 232, 499, 595, 627, 715, 
907, 1387, 1411, 3003, 3355, 4411, 5107, 
6787, 10483, 11803 


17 


[7,11,20,-6,4,8]* 


2 X 10 


o "1 o n A ^ 

3, 187, 643 


17 


[3,23,23,-2,2,22]* 


9 X 10^3 / 
2 X 10 


= 88 max(^^) = 89563 


19 


[7,11,23,-2,6,10] 


1 nil 
10 


4, 19, 163, 760, 1051 


19 


[4,19,20,0,4,0] 


1 nl2 / 
10 / 

2 X 10^3 


7, 11, 24, 43, 115, 123, 139, 228, 232, 267, 
403, 424, 435, 499, 520, 568, 627, 643, 691, 
883, 1099, 1411, 1659, 1672, 1867, 2139, 
2251, 2356, 2851, 3427, 4123, 5131, 5419, 
5707, 6619, 7723, 8968, 12331, 22843, 27955 


23 


[8,12,23,4,0,0]* 


4 X 10^1 


3,4,27, 115, 123,163,403,427, 443, 667, 
1467, 2787, 3523 


23 


[4,23,24,0,4,0] 


3 X 10^ 


= 78, max(£f ) = 72427 


23 


[3,31,31,-2,2,30] 


3 X 10^ 


j^E^ = 196, max(£^) = 286603 


29 


[11,12,32,8,4,12]* 7 x 10^^ / 
2 X 10^2 


SE^ = 24, max(ES) = 22243 


29 


[8,15,31,4,8,2]* 


4 X lO^V 
4 X 10^^ 


= 23, max(^f ) = 7987 


29 


[3,39,39,-2,2,38] 


10^ 


= 382, max(£^) = 1107307 


31 


[8,16,31,4,0,0]* 


4 X lO^V 

5 X 10^3 


= 36, max(^f ) = 17515 


31 


[7,19,36,-6,4,16]* 


2 X 10^7 

3 X 10^^ 


#E§ = 29, max(£f ) = 15283 


31 


[4,31,32,0,4,0] 


10" 


#E^ = 166, max{E^) = 174003 


37 


[15,20,23,-4,14,8; 


10^ 


8,19,43,163,427,723,2923,3907 


37 


[8,19,39,4,8,2]* 


6.5 X 10^7 
2 X 10^^ 


^E^ = 55, max(£^) = 24952 


41 


[12,15,44,8,12,4] 


10^0 


#E^ = 60, max{E§) = 82123 



CM LIFTINGS OF SUPERSINGULAR ELLIPTIC CURVES 

Table 7. The set of exceptions . 
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p 


Quadratic Form 


AT / AT 

iVo/iVi 


£^ or {4^^S^ and maxi 






41 


[11,15,47,-2,10,14] 


10^° 




= 65, max(£^^) = 


= 48547 




41 


[7,24,47,4,2,24] 


3 X 10^ 




= 82, max(£:|^) = 


= 83107 




41 


[3,55,55,-2,2,54] 


10^° 




= 896, max(^^) 


= 5017867 




43 


[15,23,24,2,8,12] 


3.6 X 10^° 


4, 11, 16, 52, 67, 187, 
1012, 2347, 2451 


379, 403, 568, 


883, 


43 


111 16 47 4 2 161* 


4.5 X 10^^/ 
8 X 10^^ 




= 81, max{£§) = 


= 73315 




43 


[4,43,44,0,4,0] 


109 




= 439, max(£^) 


= 1079467 




47 


[12,16,47,4,0,0] 


10^ 




= 106, max(£^) 


= 272083 




47 


[8,24,47,4,0,0] 


10^ 




= 108, max(£^) 


= 85963 




47 


[7,27,55,-2,6,26] 


10^ 




= 112, max(£^) 


= 78772 




47 


[4,47,48,0,4,0] 


2 X 10^ 




= 556, max(£^^) 


= 5345827 




47 


[3,63,63,-2,2,62] 


10^ 




= 1165, max(£^^ 


) = 4812283 




53 


[20,23,32,-12,4,20] 


10^ 




= 30, max(£^^) = 


= 33147 




53 


[12,19,56,8,12,4] 


109 




= 138, max(£^) 


= 178027 




53 


[8,27,55,4,8,2] 


109 




= 152, max(£^) 


= 137323 




53 


[3,71,71,-2,2,70] 


109 




= 1604, max{S^ 


) = 6474427 




59 


[15,16,63,4,2,16] 


2 X 109 




= 158, max(£^) 


= 304027 




59 


[15,19,64,-14,8,12] 


2 X 109 




= 174, max(£^) 


= 318091 




59 


[7,35,68,-6,4,32] 


2 X 109 




= 228, max(£^) 


= 132883 




59 


[12,20,59,4,0,0] 


2 X 109 




= 193, max(£^) 


= 316747 




59 


[4,59,60,0,4,0] 


2 X 109 




= 920, max(£^) 


= 3136219 




59 


[3,79,79,-2,2,78] 


2 X 109 




= 2072, max(£f 


) = 8447443 




61 


[23,24,32,16,4,12] 


2 X 109 




= 43, max(£f ) = 


= 11923 




61 


[7,35,71,-2,6,34] 


2 X 109 




= 271, max(£^) 


= 1096867 




61 


[8,31,63,4,8,2] 


2 X 109 




= 233, max(^^) 


= 363987 




61 


[11,23,68,-6,8,20] 


2 X 109 




= 201, max(£^) 


= 190747 
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Table 8. The set of exceptions . 



p 


Quadratic Form 




£#or( 


ij^£^ and max 


m) 


67 


[15,36,39,-4,14,16] 


109 




= 


57, max(£^^) = 


= 20707 


67 


[23,24,35,8,2,12] 


109 




= 


59, max(£f ) = 


= 126043 


67 


[16,19,71,12,16,6] 


2 X 109 




= 


264, max(£f ) 


= 421579 


67 


[4,67,68,0,4,0] 


109 




= 


1271, max(^^ 


) = 3846403 


71 


[15,20,76,8,4,20] 


2 X 109 




= 


275, max(£f ) 


= 321883 


71 


[15,19,79,-2,14,18] 


2 X 109 




= 


273, max(^f ) 


= 267883 


71 


[16,20,71,12,0,0] 


2 X 109 




= 


310, max(^f ) 


= 1540771 


71 


[12,24,71,4,0,0] 


2 X 109 




= 


307, max(^f ) 


= 635947 


71 


[8,36,71,4,0,0] 


2 X 109 




= 


346, max(^f ) 


= 1053427 


71 


[4,71,72,0,4,0] 


2 X 109 




= 


1450, max(£^ 


) = 6463627 


71 


[3,95,95,-2,2,94] 


2 X 109 




= 


3170, max(£^ 


) = 15135283 


73 


[15,39,40,2,8,20] 


109 




= 


81, max(^f ) = 


= 53188 


73 


[20,31,44,-12,4,28] 


109 




= 


72, max(£f ) = 


= 111763 


73 


[7,43,84,-6,4,40] 


2 X 109 




= 


420, max(£f ) 


= 364708 


73 


[11,28,80,8,4,28] 


2 X 109 




= 


336, max(£^^) 


= 723795 


79 


[23,31,44,18,16,20] 


109 




= 


88, max(^f ) = 


= 50955 


79 


[16,20,79,4,0,0] 


2 X 109 




= 


383, max(ff ) 


= 1419867 


79 


[19,20,84,16,8,20] 


2 X 109 




= 


391, max(£f ) 


= 1210675 


79 


[11,31,87,-10,6,26] 


2 X 109 






409, max(^f ) 


= 12778803 


79 


[8,40,79,4,0,0] 


2 X 109 






495, max(^f ) 


= 1116507 


79 


[4,79,80,0,4,0] 


2 X 109 






1886, max(£^ 


) = 25575460 


83 


[23,31,44,-14,8,12] 


109 






97, max(ff ) = 


= 36763 


83 


[12,28,83,4,0,0] 


2 X 109 






432, max(£f ) 


= 635347 


83 


[7,48,95,4,2,48] 


2 X 109 






529, max(^f ) 


= 1358107 


83 


[16,23,87,12,16,6] 


2 X 109 






416, max(^f ) 


= 1202587 


83 


[11,31,92,-6,8,28] 


2 X 109 






469, max(^f ) 


= 1381867 



CM LIFTINGS OF SUPERSINGULAR ELLIPTIC CURVES 

Table 9. The set of exceptions . 
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p 


Quadratic Form 


No/Ni 


^^or( 


"^S^ and max 




83 


[3,111,111,-2,2,110] 


2 X 10^ 




= 


4639, max(£^ 


) = 62337067 


83 


[4,83,84,0,4,0] 


2 X 10^ 




= 


2134, max(^f 


) = 9405643 


89 


[23,31,48,2,12,16] 


109 




= 


118, max(^f ) 


= 137707 


89 


[15,24,95,4,2,24] 


5 X 10^ 




= 


502, max{S^) 


= 682147 


89 


[15,27,96,-14,8,20] 


5 X 10^ 




= 


464, max(^f ) 


= 1534723 


89 


[19,23,95,-18,10,14] 


5 X 10^ 




= 


540, max(£f ) 


= 981403 


89 


[7,51,103,-2,6,50] 


5 X 10^ 




= 


646, max(£^^) 


= 1427827 


89 


[3,119,119,-2,2,118] 


2 X 10^ 




= 


5357, max(£^^ 


) = 28654707 


89 


[12,31,92,8,12,4] 


5 X 10^ 




= 


478, max(^f ) 


= 653227 


97 


[23,39,51,-22,6,14] 


109 




= 


283, max(£f ) 


= 74011 


97 


[15,52,55,-4,14,24] 


109 




= 


295, max(£f ) 


= 94963 


97 


[7,56,111,4,2,56] 


109 




= 


814, max(^f ) 


= 851272 


97 


[20,39,59,-4,8,38] 


109 




= 


277, max(£f ) 


= 118243 


97 


[19,23,104,-14,12,16] 


109 




= 


636, max{S^) 


= 1336483 


101 


[32,39,44,-12,28,20] 


109 




= 


158, max(£^^) 


= 123523 


101 


[12,35,104,8,12,4] 


109 




= 


652, max(£f ) 


= 1157083 


101 


[15,28,108,8,4,28] 


109 






625, max(£^^) 


= 1299163 


101 


[15,27,111,-2,14,26] 


109 






652, max(^f ) 


= 901363 


101 


[7,59,116,-6,4,56] 


109 






881, max(£f ) 


= 1720048 


101 


[11,39,111,-10,6,34] 


109 






723, max(^f ) 


= 1305627 


101 


[3,135,135,-2,2,134] 


109 






7304, max{S^ 


) = 24487147 


103 


[23,36,59,-4,22,16] 


109 






174, max(^f ) 


= 121027 


103 


[16,28,103,-12,0,0] 


109 






696, max(£^^) 


= 1004347 


103 


[15,55,56,2,8,28] 


109 






200, max(£f ) 


= 353728 
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Table 10. The set of exceptions £^ . 



p 


Quadratic Form 


No/Ni 


or {^£e and max 




103 


[19,23,111,-10,14,18 


109 




= 709, max(£f ) 


= 1086547 


103 


[8,52,103,4,0,0] 


109 




= 896, max(^f ) 


= 1019467 


103 


[7,59,119,-2,6,58] 


109 




= 903, max(£f ) 


= 1959163 


103 


[4,103,104,0,4,0] 


109 




= 2358, max(£|^ 


) = 6390532 


107 


[35,39,44,-18,32,4] 


109 




= 186, max(^f ) 


= 169467 


107 


[23,40,56,16,4,20] 


109 




= 209, max(£f ) 


= 274387 


107 


[16,27,111,-4,16,2] 


109 




= 769, max(£|^) 


= 2998675 


107 


[12,36,107,4,0,0] 


109 




= 817, max(£|') 


= 695179 


107 


[19,23,116,-6,16,20] 


109 




= 813, max(^f ) 


= 3142483 


107 


[11,39,119,-2,10,38] 


109 




= 856, max(£f ) 


= 838987 


107 


[4,107,108,0,4,0] 


109 




= 3873, max(^|^ 


) = 13204228 


107 


[3,143,143,-2,2,142] 


109 




= 8410, max(£|^ 


) = 44363163 


109 


[32,44,47,20,28,36] 


10^ 




= 205, max(£f ) 


= 193747 


109 


[23,39,59,10,14,22] 


108 




= 215, max(£f ) 


= 1034083 


109 


[8,55,111,4,8,2] 


109 




= 1039, max(£^ 


) = 2522587 


109 


[24,39,56,16,12,4] 


108 




= 225, max(^f ) 


= 215659 


109 


[11,40,119,4,2,40] 


109 




= 891, max(^f ) 


= 947755 


109 


[19,23,119,-2,18,22] 


109 




= 857, max(^f ) 


= 1300915 


113 


[35,39,47,-6,34,10] 


108 




= 213, max(£f ) 


= 142267 


113 


[23,40,59,8,2,20] 


108 




= 220, max(^f ) 


= 146787 


113 


[20,47,68,-12,4,44] 


108 




= 247, max(£f ) 


= 253363 


113 


[23,24,119,20,10,24] 


5 X 109 




= 904, max(£f ) 


= 1800643 


113 


[19,24,119,4,2,24] 


5 X 109 




= 1005, max(£f 


) = 1997835 


113 


[12,39,116,8,12,4] 


5 X 109 




= 907, max(£f ) 


= 1130803 


113 


[3,151,151,-2,2,150] 


5 X 109 




= 9302, max(£^ 


) = 30158683 



CM LIFTINGS OF SUPERSINGULAR ELLIPTIC CURVES 

Table 11. Good Bounds Dp from Theorem 11.11 for p < 107. 
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p 


Dp 


P 


Dp 


3,5,7,13 


1 


59 


1.166 X 10^^ 


11 


8.973 X 10^ 


67 


2.642 X 10^^ 


1 7 


1 51 n X in^^ 


71 


1 793 X 10^^ 


19 


1.606 X 10^3 


73 


1.452 X 10^9 


23 


6.955 X 10^5 


79 


2.370 X 10^0 


29 


1.550 X 10^^ 


83 


1.033 X 10^0 


31 


1.008 X 10^^ 


89 


3.257 X 10^5 


37 


1.117 X 10^5 


97 


7.815 X 10^9 


41 


2.379 X 10^^ 


101 


5.296 X 10^0 


43 


6.461 X 10^^ 


103 


8.748 X 10^^ 


47 


5.467 X 10^9 


107 


1.761 X 10^1 


53 


1.166 X 10^*^ 


109 


1.841 X 10^1 


61 


3.797 X 10^^ 


113 


1.041 X 10^3 
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